Method and system for preventing telecommunication fraud

Abstract

The invention discloses a method and a system for preventing telecommunication fraud, and relates to the field of telecommunication fraud prevention, and the method and the system for preventing telecommunication fraud comprise a data source acquisition module, a data analysis module, a big data early warning module and a service business data application module. According to the invention, information among the telecommunication fraud cases, operators, banks and internet companies can be effectively interconnected and intercommunicated, the telecommunication fraud cases can be effectively prevented, the loss of people is reduced, and the telecommunication fraud system can be prevented from quickly and intelligently analyzing and processing various mobile communication and network data, so that the system is convenient to use. The telecommunication fraud information can be automatically captured and analyzed in big data, so that telecommunication fraud criminal behaviors can be timely and effectively pre-warned and handled.

Description

Technical Field

[0001] The present invention relates to the field of preventing telecommunication fraud, and in particular to a method and system for preventing telecommunication fraud. Background Art

[0002] In telecom fraud cases, since fraudulent calls are constantly modified, it is difficult to prevent them through the operator's blacklist mechanism. The agency needs to detect known or unknown suspicious Internet calls within 10 minutes, and then notify and warn the user: In addition, if a number is found to be continuously committing fraud, measures need to be taken to stop overseas calls; finally, the discovered dens can be traced and cracked down.

[0003] In the case of telecommunications fraud, the government has invested a lot of police force and financial resources to detect telecommunications fraud cases. However, due to the inability to effectively interconnect information between operators, banks, and Internet companies, telecommunications fraud cases cannot be effectively prevented, resulting in losses to the people. The existing telecommunications fraud prevention system cannot quickly and intelligently analyze and process various mobile communications and network data, and cannot automatically capture and analyze telecommunications fraud information in big data, so as to timely and effectively warn and deal with telecommunications fraud crimes. It is difficult to build a domain knowledge base that fits the characteristics of telecommunications fraud cases. It is difficult to adopt offensive and defensive technologies and use the concept of remote forensics to monitor overseas VOIP fraud phone servers. It is impossible to discover fraudulent calls from the source and send them back in real time. It is difficult to ensure that when a fraudulent call is made, the agency cannot obtain information and notify users within 10 minutes to prevent being deceived.

[0004] Therefore, those skilled in the art provide a method and system for preventing telecommunications fraud to solve the problems raised in the above background technology. Summary of the Invention

[0005] The purpose of the present invention is to provide a method and system for preventing telecommunications fraud, so as to solve the problems raised in the above background technology. For telecommunications fraud cases, the government has invested a lot of police force and financial resources to detect telecommunications fraud cases. However, due to the inability to effectively interconnect information between operators, banks, and Internet companies, telecommunications fraud cases cannot be effectively prevented, causing losses to the people. The existing telecommunications fraud prevention system cannot quickly and intelligently analyze and process various mobile communication and network data, cannot automatically capture and analyze telecommunications fraud information in big data, and thus timely and effectively warn and deal with telecommunications fraud crimes. It is difficult to build a domain knowledge base that fits the characteristics of telecommunications fraud cases. It is difficult to adopt attack and defense technologies and use the concept of remote forensics to monitor overseas VOIP fraud phone servers. It is impossible to discover fraudulent calls from the source and transmit them back in real time. It is difficult to ensure that when a fraudulent call is made, the agency cannot obtain information and notify users within 10 minutes to prevent being deceived.

[0006] To achieve the above object, the present invention provides the following technical solutions:

[0007] A method and system for preventing telecommunications fraud, comprising a data source acquisition module, a data analysis module, a big data early warning module, and a service business data application module;

[0008] Data source acquisition module: The data acquisition module mainly includes the automated scanning and evidence collection module, the historical data module, the data provision module, and the other channel data module. Through these four parts, data sources are acquired to collect information on various types of telecommunications fraud cases. Referring to the established ontology, the collected data is stored in the historical database and provision database of the knowledge base in the prescribed format. In the historical database and provision database, automated evidence collection technology is used to access the feature server related to the crime to capture data, including databases, accounts, pictures, and documents. Automated evidence collection can also be performed through other channel databases to collect data from information sources.

[0009] Data Analysis Module: This module captures data from crime-related feature servers obtained through automated forensics, including databases, accounts, images, and documents, and performs data analysis. It primarily analyzes basic information and virtual account information, combining ontological data with information extraction technology to uncover the patterns and characteristics of telecom fraud cases over a period of time and provide targeted case warnings.

[0010] Big data early warning module: This module mainly includes three aspects: telephone fraud early warning, SMS fraud early warning, and online communication fraud early warning. Telephone fraud early warning mainly includes number recognition early warning, keyword early warning, and dangerous word early warning. SMS fraud early warning mainly includes automatic message blocking, blacklisting of users, and data mining analysis and monitoring. Online communication fraud early warning mainly includes monitoring of data packets from remote IP addresses, monitoring of abnormal data packets to banks, and monitoring of bank account data flow of key users.

[0011] Service business data application module: The data from big data warning is applied through report display, big data warning and cooperation interface, and warning data is sent to local municipal agencies to quickly respond to fraud cases.

[0012] As a preferred embodiment of the present invention: in the data source acquisition module, when the automatic scanning and evidence collection module performs automatic scanning and evidence collection, the VOIP tracing system of the web crawler can be selected to perform high-speed scanning in the global IPV4 address resources, and identify the TCP / IP protocol stack fingerprint by traversing the surviving IPs around the world. The identification parameters include FIN mark, BOGUS mark, TCP ISN sampling, ACK response, and ICMP response message.

[0013] As a preferred embodiment of the present invention: in the data analysis module, the basic information includes name, mobile phone number, bank card number, and home address information; the virtual account information includes the registered account information and email information of the social networking site.

[0014] As a preferred embodiment of the present invention: in the service business data application module, the report display mainly uses algorithms to count and analyze data, display national and municipal fraud data and development trends, and provide data support for anti-telecom fraud work.

[0015] As a preferred embodiment of the present invention: in the service business data application module, the cooperation interface provides certain data support services to the agency through the interface, namely query and auxiliary cases.

[0016] Compared with the prior art, the present invention has the following beneficial effects:

[0017] The present invention provides a method and system for preventing telecommunications fraud. In telecommunications fraud cases, information between operators, banks, and Internet companies can be effectively interconnected, which can effectively prevent the occurrence of telecommunications fraud cases and reduce people's losses. The telecommunications fraud prevention system can quickly and intelligently analyze and process various mobile communication and network data, and can automatically capture and analyze telecommunications fraud information in big data, so as to timely and effectively warn and deal with telecommunications fraud crimes. The ability to build a domain knowledge base that fits the characteristics of telecommunications fraud cases is key. Offensive and defensive technologies can be used, and the concept of remote forensics can be used to monitor overseas VOIP fraud call servers. Fraudulent calls can be discovered at the source and transmitted back in real time. When a fraudulent call is made, the agency can quickly obtain information and notify the user within 10 minutes to prevent being deceived. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Other features, objects and advantages of the present invention will become more apparent from the detailed description of the non-limiting embodiments with reference to the following drawings:

[0019] Figure 1 The present invention is a schematic diagram of the overall process structure of a method and system for preventing telecommunications fraud. DETAILED DESCRIPTION

[0020] In an embodiment of the present invention, a method and system for preventing telecommunications fraud include a data source acquisition module, a data analysis module, a big data early warning module, and a service business data application module;

[0021] Data source acquisition module: The data acquisition module mainly includes the automated scanning and evidence collection module, the historical data module, the data provision module, and the other channel data module. Through these four parts, data sources are acquired to collect information on various types of telecommunications fraud cases. Referring to the established ontology, the collected data is stored in the historical database and provision database of the knowledge base in the prescribed format. In the historical database and provision database, automated evidence collection technology is used to access the feature server related to the crime to capture data, including databases, accounts, pictures, and documents. Automated evidence collection can also be performed through other channel databases to collect data from information sources.

[0022] Data Analysis Module: This module captures data from crime-related feature servers obtained through automated forensics, including databases, accounts, images, and documents, and performs data analysis. It primarily analyzes basic information and virtual account information, combining ontological data with information extraction technology to uncover the patterns and characteristics of telecom fraud cases over a period of time and provide targeted case warnings.

[0023] Big data early warning module: This module mainly includes three aspects: telephone fraud early warning, SMS fraud early warning, and online communication fraud early warning. Telephone fraud early warning mainly includes number recognition early warning, keyword early warning, and dangerous word early warning. SMS fraud early warning mainly includes automatic message blocking, blacklisting of users, and data mining analysis and monitoring. Online communication fraud early warning mainly includes monitoring of data packets from remote IP addresses, monitoring of abnormal data packets to banks, and monitoring of bank account data flow of key users.

[0024] Service business data application module: The data from big data warning is applied through report display, big data warning and cooperation interface, and warning data is sent to local municipal agencies to quickly respond to fraud cases.

[0025] In the case of telecommunications fraud, information between operators, banks, and Internet companies can be effectively interconnected, which can effectively prevent the occurrence of telecommunications fraud cases, reduce people's losses, and prevent telecommunications fraud. The system can quickly and intelligently analyze and process various mobile communications and network data, and can automatically capture and analyze telecommunications fraud information in big data, thereby timely and effectively warning and handling telecommunications fraud crimes.

[0026] In the data source acquisition module, automated scanning and evidence collection utilizes a web crawler's VOIP traceability system, enabling high-speed scanning of global IPv4 address resources. By traversing live IP addresses worldwide, the TCP / IP protocol stack fingerprint is identified using parameters such as the FIN tag, BOGUS tag, TCP ISN sampling, ACK response, and ICMP response message. In the data analysis module, basic information includes name, mobile phone number, bank card number, and home address; virtual account information includes social networking site registration information and email address. In the service and business data application module, report presentation primarily utilizes algorithms to compile and analyze data, showcasing national and municipal fraud statistics and trends, providing data support for anti-telecom fraud efforts. Within this module, the collaborative interface provides data support services to government agencies, including query and case assistance.

[0027] The key is to be able to build a domain knowledge base that suits the characteristics of telecommunications fraud cases. By adopting offensive and defensive technologies and utilizing the concept of remote forensics, we can monitor overseas VOIP fraud call servers, detect fraudulent calls at the source and transmit them back in real time. When a fraudulent call is made, the authorities can quickly obtain information and notify users within 10 minutes to prevent them from being deceived.

[0028] The working principle of the present invention is as follows: a method and system for preventing telecommunication fraud includes a data source acquisition module, a data analysis module, a big data early warning module and a service business data application module;

[0029] Data source acquisition module: The data acquisition module mainly includes the automated scanning and evidence collection module, the historical data module, the data provision module and the other channel data module. Through these four parts, data sources are acquired to collect information on various types of telecommunications fraud cases. Referring to the established ontology, the collected data is stored in the historical database and provision database of the knowledge base in the prescribed format. In the historical database and provision database, automated evidence collection technology is used to enter the feature server related to the crime to capture data, including databases, accounts, pictures and documents. Automated evidence collection can also be performed through other channel databases to collect data from information sources. In the data source acquisition module, the automated scanning and evidence collection module can use the VOIP tracing system of the web crawler to perform high-speed scanning in the global IPV4 address resources. By traversing the surviving IPs around the world, the TCP / IP protocol stack fingerprint is identified. The identification parameters include FIN mark, BOGUS mark, TCP ISN sampling, ACK response, and ICMP response message.

[0030] Data analysis module: Captures data from crime-related feature servers obtained through automated forensics, including databases, accounts, images, and documents, and performs data analysis. It mainly analyzes basic information and virtual account information, combines ontological data with information extraction technology, and explores the patterns and characteristics of telecommunications fraud cases over a period of time, so as to provide targeted case warnings. In the data analysis module, basic information includes name, mobile phone number, bank card number, and home address information; virtual account information includes registered account information and email information on social networking sites.

[0031] Big data early warning module: This module mainly includes three aspects: telephone fraud early warning, SMS fraud early warning, and online communication fraud early warning. Telephone fraud early warning mainly includes number recognition early warning, keyword early warning, and dangerous word early warning. SMS fraud early warning mainly includes automatic message blocking, blacklisting of users, and data mining analysis and monitoring. Online communication fraud early warning mainly includes monitoring of data packets from remote IP addresses, monitoring of abnormal data packets to banks, and monitoring of bank account data flow of key users.

[0032] The Service Business Data Application Module utilizes big data warning data through report presentation, big data warnings, and collaborative interfaces, providing early warning data to local government agencies, enabling rapid response to fraud cases. Within the Service Business Data Application Module, report presentation primarily utilizes algorithms to compile and analyze data, showcasing national and local fraud statistics and trends, providing data support for anti-telecom fraud efforts. Within the Service Business Data Application Module, collaborative interfaces provide data support services to government agencies, including query and case assistance.

[0033] Effective information interconnection between telecom fraud cases, including telecom operators, banks, and internet companies, can effectively prevent telecom fraud and reduce public losses. The anti-telecom fraud system rapidly and intelligently analyzes and processes various mobile communication and network data, automatically capturing and analyzing telecom fraud information within big data, thereby providing timely and effective early warning and response to telecom fraud crimes. This anti-telecom fraud platform is interconnected with major telecom operators, banks, UnionPay, and internet companies, primarily Tencent. The big data early warning module utilizes a sentencing structure to connect with other systems and provide three functions. The first is that upon receiving a request containing a bank card number, the platform uses the card number to query the mobile phone number of the bank's CEO associated with the card number and returns this number to the requester. The second is receiving two mobile phone numbers and checking for recent voice call or text message records between them. The platform also sends these two numbers to the internet company to check if they correspond and if their WeChat accounts are friends. If there are voice call or text message records between the two numbers on the carrier, or if the two numbers are linked to WeChat accounts, then there is a social network relationship between the two numbers. Otherwise, there is no social relationship between the two mobile phone numbers. The third is receiving a request from a mobile phone number, asking the user to confirm whether to continue with a suspicious transfer transaction. The platform sends a text message and a voice call to the user, informing them that their recent funds transfer transaction poses a risk of telecommunications fraud. The user is asked to reply to the text message or case to confirm whether to continue or cancel the transaction, and then respond with a corresponding code to the requester. When applying data from the service business data application module, the originating bank monitors each outgoing fund in real time. For large transfers, such as those exceeding 10,000 yuan, the bank immediately checks whether there are any previous transfer records between the originating and receiving accounts. If so, the transfer proceeds normally; otherwise, the bank proceeds to the next step. The originating bank then obtains the receiving account and sends it to the anti-fraud platform. The platform then checks whether there is a social network connection between the two numbers. If so, the transfer proceeds. If not, the bank proceeds to the next step. The originating bank then sends the mobile phone number associated with the originating account to the anti-fraud platform, indicating that the transaction poses a risk of fraud and requesting reconfirmation from the user. The anti-fraud platform then sends a text message and a voice call to the user, alerting them to the risk and requesting reconfirmation. The bank then sends the confirmation result back to the bank. If no response is received within a certain period of time, the transfer is considered to be continued. If the originating bank receives confirmation from the user to continue the transfer, the transfer proceeds. Otherwise, the transfer is terminated.The key is to be able to build a domain knowledge base that suits the characteristics of telecommunications fraud cases. By adopting offensive and defensive technologies and utilizing the concept of remote forensics, we can monitor overseas VOIP fraud call servers, detect fraudulent calls at the source and transmit them back in real time. When a fraudulent call is made, the authorities can quickly obtain information and notify users within 10 minutes to prevent them from being deceived.

[0034] The above is only a preferred specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any technician familiar with this technical field, within the technical scope disclosed by the present invention, who makes equivalent replacements or changes based on the technical solutions and inventive concepts of the present invention, should be covered by the scope of protection of the present invention.

Claims

1. A method and system for preventing telecommunication fraud, characterized in that: The method and system for preventing telecommunications fraud include a data source acquisition module, a data analysis module, a big data warning module, and a service business data application module; Data source acquisition module: The data acquisition module mainly includes the automated scanning and evidence collection module, the historical data module, the data provision module, and the other channel data module. Through these four parts, data sources are acquired to collect information on various types of telecommunications fraud cases. Referring to the established ontology, the collected data is stored in the historical database and provision database of the knowledge base in the prescribed format. In the historical database and provision database, automated evidence collection technology is used to access the feature server related to the crime to capture data, including databases, accounts, pictures, and documents. Automated evidence collection can also be performed through other channel databases to collect data from information sources. Data Analysis Module: This module captures data from crime-related feature servers obtained through automated forensics, including databases, accounts, images, and documents, and performs data analysis. It primarily analyzes basic information and virtual account information, combining ontological data with information extraction technology to uncover the patterns and characteristics of telecom fraud cases over a period of time and provide targeted case warnings. Big data early warning module: This module mainly includes three aspects: telephone fraud early warning, SMS fraud early warning, and online communication fraud early warning. Telephone fraud early warning mainly includes number recognition early warning, keyword early warning, and dangerous word early warning. SMS fraud early warning mainly includes automatic message blocking, blacklisting of users, and data mining analysis and monitoring. Online communication fraud early warning mainly includes monitoring of data packets from remote IP addresses, monitoring of abnormal data packets to banks, and monitoring of bank account data flow of key users. Service business data application module: The data from big data warning is applied through report display, big data warning and cooperation interface, and warning data is sent to local municipal agencies to quickly respond to fraud cases.

2. A method and system for preventing telecommunications fraud according to claim 1, characterized in that: In the data source acquisition module, when the automatic scanning and evidence collection module performs automatic scanning and evidence collection, the VOIP tracing system of the web crawler can be selected to perform high-speed scanning in the global IPV4 address resources, and identify the TCP / IP protocol stack fingerprint by traversing the surviving IPs around the world. The identification parameters include FIN mark, BOGUS mark, TCP ISN sampling, ACK response, and ICMP response message.

3. A method and system for preventing telecommunication fraud according to claim 1, characterized in that: In the data analysis module, basic information includes name, mobile phone number, bank card number, and home address information; virtual account information includes registered account information and email information of the social networking site.

4. A method and system for preventing telecommunication fraud according to claim 1, characterized in that: In the service business data application module, the report display mainly uses algorithms to count and analyze data, displaying national and municipal fraud data and development trends, and providing data support for anti-telecom fraud work.

5. A method and system for preventing telecommunication fraud according to claim 1, characterized in that: In the service business data application module, the cooperation interface provides certain data support services to the agency through the interface, namely query and auxiliary cases.

Images